dependabot-maven 0.396.0 → 0.397.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: f681ccdf35c9bb41f70991513c98aa2c71e0373c848231238cfb3f1fec8d5e66
4
- data.tar.gz: 8c079e8daf4de93af87c167b0230c5d42c9046ce23359560ef76dcbb5e181130
3
+ metadata.gz: c5193718aa5e66590c85b1c56c70f9766bd82abff0c171b5ed0aa604c8a07500
4
+ data.tar.gz: 0d7f6d3afef609648c953e43fbb879e248bbe6373454f4153d59aaf6006b202f
5
5
  SHA512:
6
- metadata.gz: c7c02de0cb8393690544546664a2f1b2a883850c241ab27b23c649b596db5ec41445c1d6904279de15b8aaec7243b7e90c41265b4e37bdf0d4856bd232c3bca1
7
- data.tar.gz: b6ea966696ecc770959ec9e187bb3fce67da8cb3ab6186881e60b6cc39826dd6997ecad4722ea7b705efc1b43b953e7e262b92dd9f4e5ff49fb874b22d5a5971
6
+ metadata.gz: 782b91d868dd0ea8357c3185ef168c72508022ca6cdd37be844695f32bdd3c4bab88a6112a391df57361d6359089fbc236ae5db1500521ad26371bee9dde482b
7
+ data.tar.gz: 8cccc8d15359d49469ebaa169671d57222cd5531043866ab0cd694b3abee4c32bd66c9ffd78d55476255a5727f8c935347eba7892a0dc0d75bc40ece1e0dc138
@@ -53,6 +53,11 @@ module Dependabot
53
53
 
54
54
  @update_possible ||= T.let(
55
55
  dependencies_using_property.all? do |dep|
56
+ # Skip the property update when a dependency sharing the property has no
57
+ # locatable inline version to rewrite (e.g. a version managed by an
58
+ # imported BOM), since the update cannot be applied to it.
59
+ next false if version_string(dep).nil?
60
+
56
61
  next false if includes_property_reference?(updated_version(dep))
57
62
 
58
63
  releases = VersionFinder.new(
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: dependabot-maven
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.396.0
4
+ version: 0.397.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Dependabot
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 0.396.0
18
+ version: 0.397.0
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 0.396.0
25
+ version: 0.397.0
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: rexml
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -296,7 +296,7 @@ licenses:
296
296
  - MIT
297
297
  metadata:
298
298
  bug_tracker_uri: https://github.com/dependabot/dependabot-core/issues
299
- changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.396.0
299
+ changelog_uri: https://github.com/dependabot/dependabot-core/releases/tag/v0.397.0
300
300
  rdoc_options: []
301
301
  require_paths:
302
302
  - lib